com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer

3 results · Feed

• High 8.6
  CVE-2025-66021

  OWASP Java HTML Sanitizer is vulnerable to XSS via noscript tag and improper style tag sanitization

  OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS. In version 20240325.1, OWASP java html sanitizer is vulnerable to XSS if HtmlPo…

  OWASP java-html-sanitizer com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer Maven
  Nov 26, 2025
• Critical 9.8
  CVE-2021-42575

  Policies not properly enforced in OWASP Java HTML Sanitizer

  The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

  com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer Maven
  Oct 18, 2021
• Low —
  CVE-2011-4457

  OWASP HTML Sanitizer allows redirecting to an arbitrary URL when JavaScript is disabled

  OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element.

  com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer Maven
  Nov 17, 2011